PT-2019-18720 · Metinfo · Metinfo
Published
2019-02-11
·
Updated
2019-02-11
·
CVE-2019-7718
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Metinfo versions 6.x
Description
An issue was discovered that allows an attacker to execute arbitrary PHP code via a race condition in the backend database backup function. This can be achieved by leveraging the
admin/index.php and admin/databack/bakup tables.php endpoints, specifically the n=databack&c=index&a=dogetsql&tables and 2=file put contents parameters. The vulnerability arises from the temporary creation of bakup tables.php by app/system/databack/admin/index.class.php.Recommendations
For Metinfo version 6.x, consider disabling the database backup function temporarily to prevent exploitation until a patch is available. Restrict access to the
admin/index.php and admin/databack/bakup tables.php endpoints to minimize the risk of arbitrary PHP code execution. Avoid using the tables parameter in the affected API endpoint until the issue is resolved.Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Metinfo